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DETAILED ACTION 
Continued Examination Under 37 CFR LI 14 
A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1 .17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.114. Applicant's submission filed on 1 1/21/2005 has been entered. 

Response to Amendment 
Applicant's arguments/amendments with respect to amended claims 1, 8, & 18 and 
original/previously presented claims 2-7, 9-17, and 19-21 filed 11/21/2005 have been fully 
considered and therefore the claims are rejected under new grounds. 

Drawings 

The drawings are objected to because descriptive labels other than numerical are needed 
for figures la (for elements 100, 103-104, 106, & 108), lb (for elements 100 & 103-106), lc (for 
elements 103, 106, 108, & 1 10), Id (for elements 103, 105, & 109-110) and 2 (for elements 200- 
210). See 37 CFR 1.84(o). A proposed drawing correction or corrected drawings are required in 
reply to the Office action to avoid abandonment of the application. The objection to the 
drawings will not be held in abeyance. 
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Claim Objections 

Claims 8 and 18 are objected to because of the following informalities: These claims 
recite "capable of language in lines 4 and 6 of the claims. It has been held that the recitation 
that an element is "capable of performing a function is not a positive limitation but only 
requires the ability to so perform. It does not constitute a limitation in any patentable sense. In re 
Hutchison, 69 USPQ 138. Appropriate correction is required. 

Claim Rejections - 35 USC § 102 

I. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

II. Claims 1-2 and 4-5 are rejected under 35 U.S.C. 102(e) as being fully anticipated by 
Mohammed et al., US Patent No. 6,374,357. 

As per claim 1 : 

Mohammed et al. teach a method of ensuring the security of a computer system, 
comprising loading software on said computer system suitable for operating on the computer 
system (col. 6, lines 12-32 and col. 18, lines 13-15); prior to operating the software on the 
computer system, validating said software by the use of a validator program that scans the 
software that is loaded in a secure environment (col. 18, line 56 - col. 19, line 5); marking said 
software as valid or invalid by the use of a digital signature flag (col 18, line 63 - col. 19, line 
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15); and, denying said software the ability to operate on any environment within said computer 
system if said validator fails to identify said software as valid in order to ensure the security of 
said computer system (col. 19, lines 4-12). 
As per claim 2: 

Mohammed et al. teach the method described in claim 1 wherein said method operates on 
an open platform computer system (col. 5, line 66 - col. 6, line 32). 
As per claim 4: 

Mohammed et al. teach the method described in claim 1 wherein said software is 
supplied by a third-party source (col. 9, lines 51-63). 
As per claim 5: 

Mohammed et al. teach the method described in claim 4 wherein said third-party software 
is for execution or other use on a palmtop computer (col. 6, lines 33-38). 

Claim Rejections - 35 USC § 103 

III. The following is a quotation of 35 U.S. C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

IV. Claims 3, 7-13, 15-18, and 20-21 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Mohammed et al., US Patent No. 6,374,357 as applied to claim 1 above, and 
further in view of Brody, US Pub. No. 2001/0051928. 

As per claim 3 : 
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Mohammed et al. substantially teach the method described in claim L Mohammed et al. 
also teach a host computer (col. 6, lines 33-38). Furthermore, Mohammed et al. teach that the 
computing environment allows for various computing systems, one of which may be a handheld 
device (col. 6, lines 21-26). Not explicitly disclosed is wherein said method operates on a 
computer system which comprises a portable computing device coupled to said host computer. 
However, Brody teaches a PDA coupled to a host device for personalization purposes. 
Therefore, it would have been obvious to a person in the art at the time the invention was made 
to modify the method disclosed in Mohammed et al. to have the hand-held device coupled to the 
host computer in order to carry out different functions on the portable device. This modification 
would have been obvious because a person having ordinary skill in the art, at the time the 
invention was made, would have been motivated to do so since Brody suggests that PDA's are 
used in conjunction with PC's in order to download applications because PDA's are highly 
mobile and the client can always have access to his/her PDA in par. 33, lines 1-30. 
As per claim 7: 

Mohammed et al. substantially teach the method described in claim 1 . Mohammed et al. 
also teach a host computer (col. 6, lines 33-38). Furthermore, Mohammed et al. teach that the 
computing environment allows for various computing systems, one of which may be a handheld 
device (col. 6, lines 21-26). Not explicitly disclosed is wherein said method operates on a 
computer system which comprises a palmtop computing device coupled to said host computer. 
However, Brody teaches a PDA coupled to a host device for personalization purposes. 
Therefore, it would have been obvious to a person in the art at the time the invention was made 
to modify the method disclosed in Mohammed et al. to have the hand-held device coupled to the 
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host computer in order to carry out different functions on the palmtop computing device. This 
modification would have been obvious because a person having ordinary skill in the art, at the 
time the invention was made, would have been motivated to do so since Brody suggests that 
PDA's are used in conjunction with PC's in order to download applications because PDA's are 
highly mobile and the client can always have access to his/her PDA in par. 33, lines 1-30. 
As per claim 8: 

Mohammed et al. substantially teach an apparatus for ensuring the security of software in 
a computer system, comprising a validation program that is capable of validating said software 
by first scanning said software that is loaded in a secure environment (col. 18, line 56 - col. 19, 
line 5); marking said software as valid or invalid by the use of a digital signature flag (col. 18, 
line 63 - col. 19, line 15); and, denying said software the ability to operate in any environment 
on said computer system if said validator program fails to identify said software as valid in order 
to ensure the security of said computer system (col. 19, lines 4-12). Furthermore, Mohammed et 
al. teach that the computing environment allows for various computing systems, one of which 
may be a handheld device (col. 6, lines 21-26). 

Not explicitly disclosed is wherein a portable computing device is coupled to a host 
computer, wherein said portable computing device is capable of loading software from said host 
computer to said portable computing device for operating on said portable computing device. 
However, Brody teaches a PDA coupled to a host device and can load software for 
personalization purposes. Therefore, it would have been obvious to a person in the art at the 
time the invention was made to modify the method disclosed in Mohammed et al. to have the 
hand-held device coupled to the host computer in order to carry out different functions on the 
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palmtop computing device. This modification would have been obvious because a person having 
ordinary skill in the art, at the time the invention was made, would have been motivated to do so 
since Brody suggests that PDA's are used in conjunction with PC's in order to download 
applications because PDA's are highly mobile and the client can always have access to his/her 
PDA in par. 33, lines 1-30. 
As per claim 9: 

Mohammed et al. and Brody substantially teach the apparatus described in claim 8. 
Furthermore, Brody teaches wherein said host computer is coupled to a network (par. 33, lines 1- 
30). 

As per claim 10: 

Mohammed et al. and Brody substantially teach the apparatus described in claim 8. 
Furthermore, Brody teaches wherein said portable computing device is a handheld computing 
device (par. 33, lines 1-30). 
As per claim 1 1 : 

Mohammed et al. and Brody substantially teach the apparatus described in claim 8. 
Furthermore, Brody teaches wherein said portable computing device is a personal data assistant 
(par. 33, lines 1-30). 
As per claim 12: 

Mohammed et al. and Brody substantially teach the apparatus described in claim 8. 
Furthermore, Brody teaches wherein said portable computing device is coupled to said host 
computer by an infrared device (par. 33, lines 25-30). 
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As per claim 13: 

Mohammed et al. and Brody substantially teach the apparatus described in claim 8. 
Furthermore, Brody teaches wherein said portable computing device is coupled to said host 
computer by an RF enabled device (par. 33, lines 25-30). 
As per claim 15: 

Mohammed et al. and Brody substantially teach the apparatus described in claim 8. 
Mohammed et al. further teach wherein said validation program is configured to evaluate third- 
party software and attach a digital "valid" flag if said third-party software is found to be clean of 
known security compromising routines or attach a digital "invalid" flag to said third-party 
software if said third-party software is not found to be clean of known security compromising 
routines (col. 18, line 35 - col. 19, line 15). 
As per claim 16: 

Mohammed et al. and Brody substantially teach the apparatus described in claim 15. 
Mohammed et al. further teach wherein said portable computing device is configured to load 
third-party software files with said digital "valid" flag attached and to refrain from loading third- 
party software files which have no flag attached or have said "invalid" flag attached (col. 19, 
lines 4-15). 
As per claim 17: 

Mohammed et al. and Brody substantially teach the apparatus described claim 15. 
Furthermore, Brody teaches wherein said portable computing device is a personal data assistant 
(par. 33, lines 1-30). 
As per claim 18: 
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Mohammed et al. substantially teach an apparatus for ensuring the security of a computer 
system, comprising a validation program that is capable of validating said software by scanning 
the files of said software in a secure environment on the handheld computing device prior to 
operating the software in any environment on the handheld computing device (col. 18, line 56 - 
col. 19, line 5); marking said software as valid or invalid by the use of a digital signature flag 
(col. 18, line 63 - col. 19, line 15); and denying said software the ability to operate on any 
environment on said computer system if said validator fails to identify said software as valid in 
order to ensure the security of said computer system (col. 19, lines 4-12). Furthermore, 
Mohammed et al. teach that the computing environment allows for various computing systems, 
one of which may be a handheld device (col 6, lines 21-26). 

Not explicitly disclosed is a handheld computing device couple to a network, wherein 
said handheld computing device is capable of loading software from said network to said 
handheld computing device for operating on said handheld computing device. However, Brody 
teaches a PDA coupled to a network and can load software from a network for personalization 
purposes. Therefore, it would have been obvious to a person in the art at the time the invention 
was made to modify the method disclosed in Mohammed et al. to have the hand-held device 
coupled to the network computer in order to carry out different functions on the palmtop 
computing device. This modification would have been obvious because a person having 
ordinary skill in the art, at the time the invention was made, would have been motivated to do so 
since Brody suggests that PDA's are used in conjunction with PC's in order to download 
applications because PDA's are highly mobile and the client can always have access to his/her 
PDA in par. 33, lines 1-30. 
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As per claim 20: 

Mohammed et al. and Brody substantially teach the apparatus described in claim 18. 
Mohammed et al. further teach wherein said portable computing device is configured to load 
third-party software files with said digital "valid" flag attached and to refrain from loading third- 
party software files which have no flag attached or have said "invalid" flag attached (col. 19, 
lines 4-15). 
As per claim 21: 

Mohammed et al. and Brody substantially teach the apparatus described in claim 18. 
Mohammed et al. further teach wherein said validation program is configured to evaluate third- 
party software and attach a digital "valid" flag if said third-party software is found to be clean of 
known security compromising routines or attach a digital "invalid" flag to said third-party 
software if said third-party software is not found to be clean of known security compromising 
routines (col. 18, line 35 - col. 19, line 15). 

V. Claim 6 is rejected under 35 U.S.C. 103(a) as being unpatentable over Mohammed et al., 
US Patent No. 6,374,357 as applied to claim 1 above, and further in view of Ginter et al., US 
Patent No. 6,948,070. 
As per claim 6: 

Mohammed et al. substantially teaches the method described in claim 1 . Not explicitly 
disclosed is wherein said validator program is specially constructed to reside in a secure fashion 
in said computer system. However, Ginter et al. teach the use of a tamp er-resisf ant security 
barrier so that processes are ensured to be carried out within a secure environment. Therefore, it 
would have been obvious to a person in the art at the time the invention was made to modify the 
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method disclosed in Mohammed et al. for the validator program to be contained within a secure 
environment in order to ensure that it has not been tampered with so that it correctly validates the 
software/application. This modification would have been obvious because a person having 
ordinary skill in the art, at the time the invention was made, would have been motivated to do so 
since Ginter et al. suggests that it is important to ensure that processes are carried out within a 
secure environment in col. 59, lines 48-59. 

VI. Claims 14 and 19 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Mohammed et al., US Patent No. 6,374,357 and Brody, US Pub. No. 2001/0051928 as applied to 
claims 8 and 18 above, and further in view of Ginter et al., US Patent No. 6,948,070. 
As per claim 14: 

Mohammed et al. and Brody substantially teach the apparatus described in claim 8. Not 
explicitly disclosed is wherein said validation program resides in said host computer in a fashion 
intended to be secure. However, Ginter et al. teach the use of a tamper-resistant security barrier 
so that processes are ensured to be carried out within a secure environment. Therefore, it would 
have been obvious to a person in the art at the time the invention was made to modify the 
apparatus disclosed in Mohammed et al. for the validator program to be contained within a 
secure environment in order to ensure that it has not been tampered with so that it correctly 
validates the software/application. This modification would have been obvious because a person 
having ordinary skill in the art, at the time the invention was made, would have been motivated 
to do so since Ginter et al. suggests that it is important to ensure that processes are carried out 
within a secure environment in col. 59, lines 48-59. 
As per claim 19: 
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Mohammed et al. and Brody substantially teach the apparatus described in claim 18. Not 
explicitly disclosed is wherein said validation program resides in said computer network in a 
fashion intended to be secure. However, Ginter et al. teach the use of a tamper-resistant security 
barrier so that processes are ensured to be carried out within a secure environment. Therefore, it 
would have been obvious to a person in the art at the time the invention was made to modify the 
apparatus disclosed in Mohammed et al. for the validator program to be contained within a 
secure environment in order to ensure that it has not been tampered with so that it correctly 
validates the software/application. This modification would have been obvious because a person 
having ordinary skill in the art, at the time the invention was made, would have been motivated 
to do so since Ginter et al. suggests that it is important to ensure that processes are carried out 
within a secure environment in col. 59, lines 48-59. 

^References Cited, Not Used 

The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

1. US Patent No. 6,694,436 

2. US Patent No. 5,953,502 

The above references have been cited because they are relevant due to the manner in which the 
invention has been claimed. 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Nadia Khoshnoodi whose telephone number is (571) 272-3825. 
The examiner can normally be reached on M-F: 8:00-4:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on (571) 272-3865. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at&66-2 17-9 197 (toll-free). 




Nadia Khoshnoodi 
Examiner 
Art Unit 2137 
2/5/2006 
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